Index: arpwatch/arp2ethers.8 diff -u /dev/null arpwatch/arp2ethers.8:1.1.2.3 --- /dev/null Sat Aug 14 03:19:34 2004 +++ arpwatch/arp2ethers.8 Thu Aug 12 14:37:09 2004 @@ -0,0 +1,64 @@ +.TH ARP2ETHERS 8 +.SH NAME +arp2ethers \- convert arpwatch address database to ethers file format +.SH SYNOPSIS +.na +.B arp2ethers +[ +.B arp.dat file +] +.ad +.SH "DESCRIPTION" +.B arp2ethers +converts the file +.IR /var/lib/arpwatch/arp.dat +(or the file specified on the command line) +into +.BR ethers(5) +format on +.IR stdout . +Usually +.IR arp.dat +is an ethernet/ip database file generated by +.BR arpwatch(8) . +The arpwatch daemon in Debian will create different +.IR arp.dat +depending on its configuration. All of them will be available at +.IR /var/lib/arpwatch/ . +.SH FILES +.na +.nh +.nf +/var/lib/arpwatch - default directory for arp.dat +arp.dat - ethernet/ip address database +.ad +.hy +.fi +.SH "SEE ALSO" +.na +.nh +.BR arpwatch (8), +.BR ethers (5), +.BR rarp (8), +.BR arp (8), +.ad +.hy +.SH BUGS +Please send bug reports to arpwatch@ee.lbl.gov. +.SH AUTHORS +.LP +Original version by Craig Leres of the Lawrence Berkeley +National Laboratory Network Research Group, University of +California, Berkeley, CA. +.LP +Modified for the Debian Project by Peter Kelemen, with +additions from Erik Warmelink. +.LP +The current version is available via anonymous ftp: +.LP +.RS +.I ftp://ftp.ee.lbl.gov/arpwatch.tar.gz +.RE +.LP +This manual page was contributed by Hugo Graumann. + Index: arpwatch/arpfetch.8 diff -u /dev/null arpwatch/arpfetch.8:1.1.2.2 --- /dev/null Sat Aug 14 03:19:34 2004 +++ arpwatch/arpfetch.8 Tue Apr 17 14:12:51 2001 @@ -0,0 +1,63 @@ +.TH ARPFETCH 8 +.SH NAME +arpfetch \- obtain ethernet/ip address pairings via snmp +.SH SYNOPSIS +.na +arpfetch +.I host +.I cname +.SH "DESCRIPTION" +.B arpfetch +gets pairings between ip addresses and the ethernet address of the +corresponding network card. These pairings are retrieved from other +network entities, like routers, by the SNMP protocol using +.BR snmpwalk(1) . +Mostly, this program is an agent that +is used to get data for +.BR arpsnmp(8) . +This fetching of address mappings can be further automated by use of +.BR bihourly(8) . +.LP +Both command arguments must be present for proper operation. +The +.IR host +argument is the hostname of the network entity being queried and the +.IR cname +argument is the SNMP community name of the network entity. +.LP +The information is presented on +.IR stdout +in a format compatible with +.BR arpsnmp(8) +and +.BR arpwatch(8) . +.LP +Further information about SNMP can be found in +.BR snmpcmd(1) +and +.BR variables(5) . +.SH "SEE ALSO" +.na +.nh +.BR arpsnmp (8), +.BR arpwatch(8), +.BR bihourly (8), +.BR snmpwalk (1), +.BR snmpcmd (1), +.BR variables (5) +.ad +.hy +.SH BUGS +Please send bug reports to arpwatch@ee.lbl.gov. +.SH AUTHORS +Craig Leres of the +Lawrence Berkeley National Laboratory Network Research Group, +University of California, Berkeley, CA. +.LP +The current version is available via anonymous ftp: +.LP +.RS +.I ftp://ftp.ee.lbl.gov/arpwatch.tar.gz +.RE +.LP +This manual page was contributed by Hugo Graumann. Index: arpwatch/arpsnmp.8 diff -u arpwatch/arpsnmp.8:1.1.1.1 arpwatch/arpsnmp.8:1.1.1.1.16.2 --- arpwatch/arpsnmp.8:1.1.1.1 Tue Apr 17 13:31:36 2001 +++ arpwatch/arpsnmp.8 Tue Apr 17 14:53:57 2001 @@ -22,7 +22,7 @@ .TH ARPSNMP 8 "17 September 2000" .UC 4 .SH NAME -arpsnmp - keep track of ethernet/ip address pairings +arpsnmp \- keep track of ethernet/ip address pairings .SH SYNOPSIS .B arpsnmp [ Index: arpwatch/arpwatch.8 diff -u arpwatch/arpwatch.8:1.1.1.1 arpwatch/arpwatch.8:1.1.1.1.16.2 --- arpwatch/arpwatch.8:1.1.1.1 Tue Apr 17 13:31:36 2001 +++ arpwatch/arpwatch.8 Tue Apr 17 14:53:57 2001 @@ -22,7 +22,7 @@ .TH ARPWATCH 8 "8 October 2000" .UC 4 .SH NAME -arpwatch - keep track of ethernet/ip address pairings +arpwatch \- keep track of ethernet/ip address pairings .SH SYNOPSIS .na .B arpwatch Index: arpwatch/bihourly.8 diff -u /dev/null arpwatch/bihourly.8:1.1.2.2 --- /dev/null Sat Aug 14 03:19:34 2004 +++ arpwatch/bihourly.8 Tue Apr 17 14:12:51 2001 @@ -0,0 +1,73 @@ +.TH BIHOURLY 8 +.SH NAME +bihourly \- track ethernet/ip address pairs +.SH SYNOPSIS +.na +bihourly +.SH "DESCRIPTION" +.B bihourly +is a script that automates the operation of +.B arpsnmp(8) +by executing +.B arpfetch(8) +on a series of hostnames and then +sending the results to +.B arpsnmp(8) +for analysis. +.LP +The result is a report of the current pairings +between ip addresses and the corresponding ethernet address +of the network hardware as reported by +.B snmpwalk(8). +Activity +is logged and noted changes are reported by email. +.LP +In its working directory +.B bihourly +expects a file named +.IR list +which contains a space separated list of hostnames to be queried +and a file named +.IR cname +which holds the SNMP community name by which to query these hosts. +.LP +Contrary to the name, +.B bihourly +does not run twice every hour. It +runs once each time it is invoked. For repeated operation +.B bihourly +must be invoked on a periodic basis by a program like +.B cron(1). +.SH FILES +.na +.nh +.nf +/var/lib/arpwatch - default working directory +list - file containing names of hosts to query +cname - file containing the SNMP community name by which to query +.ad +.hy +.fi +.SH "SEE ALSO" +.na +.nh +.BR arpsnmp (8), +.BR arpfetch(8), +.BR snmpwalk (8), +.BR cron (8) +.ad +.hy +.SH BUGS +Please send bug reports to arpwatch@ee.lbl.gov. +.SH AUTHORS +Craig Leres of the +Lawrence Berkeley National Laboratory Network Research Group, +University of California, Berkeley, CA. +.LP +The current version is available via anonymous ftp: +.LP +.RS +.I ftp://ftp.ee.lbl.gov/arpwatch.tar.gz +.RE +.LP +This manual page was contributed by Hugo Graumann. Index: arpwatch/massagevendor.8 diff -u /dev/null arpwatch/massagevendor.8:1.1.2.2 --- /dev/null Sat Aug 14 03:19:34 2004 +++ arpwatch/massagevendor.8 Tue Apr 17 14:12:51 2001 @@ -0,0 +1,91 @@ +.TH MASSAGEVENDOR 8 +.SH NAME +massagevendor \- convert the ethernet vendor codes master list to arpwatch format +.SH SYNOPSIS +.na +massagevendor +.I vendorfile +.SH "DESCRIPTION" +.B massagevendor +is a program that converts a text file containing ethernet vendor codes +into a format suitable for use by +.B arpwatch(8) +and +.B arpsnmp(8). +The input +.I vendorfile +is a master text file containing vendor codes. The output +is sent to +.I stdout. +Each line of the +.I vendorfile +is expected to have a six digit hexadecimal vendor code +followed by spaces followed by the name of the manufacturer. +.LP +All ethernet devices have a unique identifier which +includes a vendor code specifying the manufacturer of the +device. In normal operation +.B arpwatch(8) +and +.B arpsnmp(8) +use the file +.I ethercodes.dat +to report this vendor code. +.B massagevendor +is used to generate the +.I ethercodes.dat +file from text files containing these vendor codes. +.LP +Locations where an ethernet vendor codes master text file +can be obtained are given below. +.SH FILES +.na +.nh +.nf +/usr/share/arpwatch - default location of the ethernet vendor list +ethercodes.dat - file containing the list of ethernet vendor codes +.ad +.hy +.fi +.SH "SEE ALSO" +.na +.nh +.BR arpwatch(8), +.BR arpsnmp(8) +.ad +.hy +.SH NOTES +Sources for ethernet vendor codes seen in the wild are +.LP +.na +.nh +.nf +.RS +.I http://map-ne.com/Ethernet/vendor.html +.I ftp://ftp.cavebear.com/pub/Ethernet.txt +.I http://www.cavebear.com/CaveBear/Ethernet/vendor.html +.RE +.ad +.hy +.LP +Useful for comparison or completeness are the +ethernet vendor codes as assigned +by the IEEE which can be found at +.LP +.RS +.I http://standards.ieee.org/regauth/oui/oui.txt +.RE +.SH BUGS +Please send bug reports to arpwatch@ee.lbl.gov. +.SH AUTHORS +Craig Leres of the +Lawrence Berkeley National Laboratory Network Research Group, +University of California, Berkeley, CA. +.LP +The current version is available via anonymous ftp: +.LP +.RS +.I ftp://ftp.ee.lbl.gov/arpwatch.tar.gz +.RE +.LP +This manual page was contributed by Hugo Graumann.